StackRadar

edp-install Helm chart

epmdedpOfficialVerified publisher

Scored 14 Sept 2026

A Helm chart for KubeRocketCI Platform

Latest 3.15.0 1 month agodeploys tag 2.32.0 0Artifact Hub

edp-install 3.15.0 deploys 7 container images: epamedp/cd-pipeline-operator, epamedp/codebase-operator, library/busybox, ghcr.io/kuberocketci/krci-cache and 3 more. Across them, 204 findings0 critical, 2 high. The highest contribution is ALPINE-CVE-2024-6119 in openssl 3.1.4-r5, fixed in 3.1.7-r0.

Radar Score

2,0330220182

204 findings over 7 of 7 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images
ImageTagVulnerabilitiesRadar Score
epamedp/cd-pipeline-operator2.32.000019129
epamedp/codebase-operator2.35.000017118
library/busybox1.36.100000
ghcr.io/kuberocketci/krci-cache0.3.0001264764
epamedp/edp-tekton×20.27.000014104
epamedp/gitfusion0.6.10001279
epamedp/krci-portal0.8.002856839

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

154 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGHSA-mwp4-54f8-5fhrip-address@9.0.510.3.1
LowALPINE-CVE-2026-75803openssl@3.5.7-r03.5.8-r0
LowGHSA-r6q2-hw4h-h46wtar@6.2.17.5.4
LowGHSA-2883-xcg3-v3hhjs-yaml@4.1.14.3.2
LowGHSA-4c8g-83qw-93j6fast-uri@3.1.23.1.3
LowGHSA-r292-9mhp-454mtar@6.2.17.5.21
LowALPINE-CVE-2026-53801rsync@3.4.3-r03.5.0-r0
LowALPINE-CVE-2026-53795rsync@3.4.3-r03.5.0-r0
LowGHSA-w4pp-8pjf-rmxwpacote@18.0.321.5.1
LowALPINE-CVE-2026-53784rsync@3.4.3-r03.5.0-r0
LowALPINE-CVE-2026-53802rsync@3.4.3-r03.5.0-r0
LowALPINE-CVE-2026-70459rsync@3.4.3-r03.5.0-r0
LowALPINE-CVE-2026-53803rsync@3.4.3-r03.5.0-r0
LowGHSA-9ppj-qmqm-q256tar@6.2.17.5.11
LowGHSA-4xrf-jv44-h6hhip-address@10.2.010.2.2
LowALPINE-CVE-2026-53794rsync@3.4.3-r03.5.0-r0
LowALPINE-CVE-2025-26519musl@1.2.4_git20230717-r41.2.4_git20230717-r5
LowGHSA-f886-m6hf-6m8vbrace-expansion@2.0.12.0.3
LowGHSA-22jq-vg5j-6vggip-address@10.2.010.2.1
LowALPINE-CVE-2026-53792rsync@3.4.3-r03.5.0-r0
LowGHSA-c96f-x56v-gq3hfind-my-way@9.4.09.7.0
LowGHSA-83g3-92jg-28cxtar@6.2.17.5.8
LowALPINE-CVE-2026-53786rsync@3.4.3-r03.5.0-r0
LowALPINE-CVE-2026-53798rsync@3.4.3-r03.5.0-r0
LowALPINE-CVE-2026-63074openssl@3.5.7-r03.5.8-r0
LowGHSA-jqff-g426-hqxpfast-uri@3.1.23.1.6
LowGHSA-w8wr-v893-vjvptar@6.2.17.5.18
LowGHSA-7p8r-x3mc-p8w7fast-uri@3.1.23.1.5
LowGHSA-f65p-4m7j-42xcfast-uri@3.1.23.1.6
LowGHSA-fph4-wmhf-6fwffast-uri@3.1.23.1.6
LowALPINE-CVE-2026-70462rsync@3.4.3-r03.5.0-r0
LowALPINE-CVE-2026-53788rsync@3.4.3-r03.5.0-r0
LowALPINE-CVE-2026-40200musl@1.2.4_git20230717-r41.2.4_git20230717-r6
LowALPINE-CVE-2026-70454rsync@3.4.3-r03.5.0-r0
LowGHSA-52v5-jr5w-gjxrsigstore@2.3.04.1.1
LowGHSA-qc2q-p7wx-3px3google.golang.org/grpc@v1.82.11.83.1
LowGHSA-gvwx-54wh-qm9jtar@6.2.17.5.17
LowALPINE-CVE-2023-42364busybox@1.36.1-r151.36.1-r19
LowALPINE-CVE-2023-42363busybox@1.36.1-r151.36.1-r17
LowGHSA-v2v4-37r5-5v8gip-address@9.0.510.1.1
LowALPINE-CVE-2023-42366busybox@1.36.1-r151.36.1-r16
LowALPINE-CVE-2023-42365busybox@1.36.1-r151.36.1-r19
LowALPINE-CVE-2026-53785rsync@3.4.3-r03.5.0-r0
LowGHSA-h67p-54hq-rp68js-yaml@4.1.14.2.0
LowGHSA-8pvw-jcv7-9cmj@fastify/static@9.1.310.1.2
LowGHSA-3jxr-9vmj-r5cpbrace-expansion@5.0.65.0.7
LowALPINE-CVE-2026-53799rsync@3.4.3-r03.5.0-r0
LowGO-2026-4981stdlib@go1.25.81.25.10
LowGHSA-vmf3-w455-68vhtar@6.2.17.5.16
LowGO-2026-4977stdlib@go1.25.81.25.10

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
3.15.0latest1 month ago2.32.002201822,033

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/epmdedp/edp-install.svg)](https://charts.stackradar.io/charts/epmdedp/edp-install)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.